Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/290b8093-ddad-32aa-8a33-368247e9c55b.roa
File:                     290b8093-ddad-32aa-8a33-368247e9c55b.roa (raw, json)
Hash identifier:          RgpFSf+cabVXeRHg6l5lELLuXm7zAVVmfZ/M1eoiPDM=
Subject key identifier:   94:59:59:5C:63:06:EF:2A:E8:30:B3:E3:A1:75:21:2D:74:A3:D2:98
Certificate issuer:       /CN=aae4f0de-2296-435c-b411-b16981804498
Certificate serial:       010D0C9F43285847150D8FDFFF0D666C0B1DF500
Authority key identifier: 1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/290b8093-ddad-32aa-8a33-368247e9c55b.roa
Signing time:             Mon 02 Sep 2024 16:19:15 +0000
ROA not before:           Mon 02 Sep 2024 16:19:15 +0000
ROA not after:            Sun 01 Dec 2024 17:19:15 +0000
asID:                     398268
IP address blocks:        199.58.88.0/24 maxlen: 24
                          199.58.89.0/24 maxlen: 24
                          199.58.90.0/24 maxlen: 24
                          2602:fd7b::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:15:0d:8f:df:ff:0d:66:6c:0b:1d:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae4f0de-2296-435c-b411-b16981804498
        Validity
            Not Before: Sep  2 16:19:15 2024 GMT
            Not After : Dec  1 17:19:15 2024 GMT
        Subject: CN=ed3fe278-4ce5-4081-91fd-4332dcca1754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f5:84:7d:e0:1f:c1:09:d7:0b:81:aa:b8:fd:
                    3a:e6:7e:f4:93:bf:9c:03:d6:49:b0:b8:7b:ab:f1:
                    3e:1d:07:f1:8a:e4:86:fa:12:86:ec:6f:da:fc:ab:
                    6f:41:b5:8a:11:b9:82:e6:de:8a:a4:8a:84:89:82:
                    9f:17:76:df:f2:6c:5c:1e:43:c8:e3:a8:ea:a5:96:
                    85:63:06:c5:2f:51:79:5e:23:5b:18:e9:0a:59:2c:
                    c4:7a:8e:ee:00:2b:dd:72:7e:79:b2:b2:ff:b3:f2:
                    b3:09:bd:da:62:b7:bc:82:75:e1:d8:62:17:74:48:
                    de:7d:e2:a7:7e:73:47:87:b5:d6:84:ea:55:50:93:
                    82:d7:02:60:8c:58:6b:30:cb:c9:c2:be:18:ab:1a:
                    dd:59:85:b4:ee:16:0d:1d:6b:32:cb:a5:50:0a:46:
                    17:b8:90:07:25:53:61:e3:4d:6b:40:dd:6d:37:09:
                    cf:45:50:4a:ab:cb:fd:4f:ee:34:71:b7:5c:92:3b:
                    7f:63:f0:f3:1d:37:35:ef:ce:ad:d0:83:c8:a8:8e:
                    86:b2:fe:26:fc:76:3c:0f:b4:2a:3c:40:ee:ad:ca:
                    53:52:3f:37:06:3a:6e:aa:06:1d:22:4e:77:06:77:
                    fb:2f:1a:ad:19:fa:3f:a9:18:12:09:2a:f2:c5:75:
                    9a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:59:59:5C:63:06:EF:2A:E8:30:B3:E3:A1:75:21:2D:74:A3:D2:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/290b8093-ddad-32aa-8a33-368247e9c55b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl

            X509v3 Authority Key Identifier:
                keyid:1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.88.0-199.58.90.255
                IPv6:
                  2602:fd7b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:41:e8:8f:2c:84:0a:98:33:d5:1e:d1:26:7c:32:4e:b8:de:
         03:5f:a7:8f:8a:b3:60:b4:92:5f:90:f6:36:80:ab:bf:21:51:
         2d:e9:c2:44:30:48:4b:f1:39:f3:ae:6a:c6:6a:12:08:96:f6:
         4b:71:7c:f1:35:22:fe:a4:04:89:69:9f:06:8c:29:31:e4:8d:
         19:95:b7:a6:01:11:ea:5d:92:2e:47:5d:0f:a7:e8:f8:da:4a:
         0a:fd:90:c4:c0:fd:ec:29:44:96:3a:4b:52:c4:da:67:9e:16:
         85:aa:1d:13:b1:b1:38:36:df:98:70:b3:23:02:1f:16:b5:c0:
         19:d2:9d:09:88:3e:d0:5e:71:94:37:82:91:83:44:a1:05:32:
         27:f1:ee:05:f6:f0:2c:69:d7:08:ef:16:27:46:54:c2:9a:64:
         82:a5:94:57:3a:b7:28:4e:c5:ac:b3:e3:ae:bd:83:75:44:f7:
         52:c1:08:88:a9:87:71:db:1b:9b:0c:10:3c:74:a1:06:a7:f7:
         e9:c4:de:d4:72:83:32:5d:de:98:2d:4c:d0:af:b6:e7:d8:74:
         bc:6a:0b:71:69:c7:44:c0:f1:55:c6:cf:7d:3f:66:c4:6e:a2:
         90:47:34:5a:46:4d:15:9e:ec:57:fb:0c:37:c9:74:ea:4f:e0:
         f8:c7:bb:06
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEcVDY/f/w1mbAsd9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFlNGYwZGUtMjI5Ni00MzVjLWI0MTEtYjE2OTgxODA0
NDk4MB4XDTI0MDkwMjE2MTkxNVoXDTI0MTIwMTE3MTkxNVowLzEtMCsGA1UEAxMk
ZWQzZmUyNzgtNGNlNS00MDgxLTkxZmQtNDMzMmRjY2ExNzU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPWEfeAfwQnXC4GquP065n70k7+cA9ZJsLh7
q/E+HQfxiuSG+hKG7G/a/KtvQbWKEbmC5t6KpIqEiYKfF3bf8mxcHkPI46jqpZaF
YwbFL1F5XiNbGOkKWSzEeo7uACvdcn55srL/s/KzCb3aYre8gnXh2GIXdEjefeKn
fnNHh7XWhOpVUJOC1wJgjFhrMMvJwr4YqxrdWYW07hYNHWsyy6VQCkYXuJAHJVNh
401rQN1tNwnPRVBKq8v9T+40cbdckjt/Y/DzHTc1786t0IPIqI6Gsv4m/HY8D7Qq
PEDurcpTUj83BjpuqgYdIk53Bnf7LxqtGfo/qRgSCSryxXWaywIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFJRZWVxjBu8q6DCz46F1IS10o9KYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0
ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5ODE4MDQ0OTgvMjkwYjgwOTMtZGRhZC0z
MmFhLThhMzMtMzY4MjQ3ZTljNTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWFlNGYwZGUtMjI5Ni00MzVjLWI0
MTEtYjE2OTgxODA0NDk4L2FhZTRmMGRlLTIyOTYtNDM1Yy1iNDExLWIxNjk4MTgw
NDQ5OC5jcmwwHwYDVR0jBBgwFoAUH9MnZE1Yua/Ff0SCTfuPtx4Yz20wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5
ODE4MDQ0OTguY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAUBAIAATAOMAwDBAPHOlgD
BADHOlowDgQCAAIwCAMGBCYC/XsAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEVB6I8shAqYM9Ue0SZ8Mk64
3gNfp4+Ks2C0kl+Q9jaAq78hUS3pwkQwSEvxOfOuasZqEgiW9ktxfPE1Iv6kBIlp
nwaMKTHkjRmVt6YBEepdki5HXQ+n6PjaSgr9kMTA/ewpRJY6S1LE2meeFoWqHROx
sTg235hwsyMCHxa1wBnSnQmIPtBecZQ3gpGDRKEFMifx7gX28Cxp1wjvFidGVMKa
ZIKllFc6tyhOxayz4669g3VE91LBCIiph3HbG5sMEDx0oQan9+nE3tRygzJd3pgt
TNCvtufYdLxqC3Fpx0TA8VXGz30/ZsRuopBHNFpGTRWe7Ff7DDfJdOpP4PjHuwY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:24 2024 by rpki-client on console-ams.rpki-client.org